Windows DC logs event ID 4512

[chicagotech]

Q: We just upgraded our Windows 2000 DC to windows 2008 DC. The event viewer lists following warning. How do you fix it?

Log Name: DNS Server
Source: Microsoft-Windows-DNS-Server-Service
Date: 9/2/2008 3:30:48 PM
Event ID: 4512
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: dc1
Description:
The DNS server was unable to create the built-in directory partition ForestDnsZones.domainname.org. The error was 9906.

A: The error code "9906" means "DNS_ERROR_DP_FSMO_ERROR": the application
directory partition operation failed. The domain controller holding the
domain naming master role is down or unable to service the request or is
not running Windows Server 2003.

How many DC are there in the domain and which DC is holding the FSMO token?

Please check the following items first:

1. Are all DCs running in the domain, especially the FSMO holder?

2. Run the "dcdiag" tool on all DCs and check if there are any DNS, AD
replication or FSMO errors.

3. Run the "netdiag" tool on all DCs and ensure there is no network
connectivity problem.

4. Run "adsiedit.msc" on the 2008 DC

[chicagotech]

Perhaps, I should say we tried to migrade windows 2000 DC to windows 2008
DC. In other words, we joined a new windows 2008 (dc1) to the windows
2000 domain first and then run dcpromot to install Active Director on the
windows 2008. We have other two windows 2000 DCs with DNS and WINS
(192.1680.29 and 192.1680.19). dcdiag doesn't show any errors. netdiag has two
warnings:

[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.

[WARNING] The DNS entries for this DC are not registered correctly on DNS
se
rver '0.0.0.0'. Please wait for 30 minutes for DNS server replication.

One of windows 2000 hosts FSMO. Should we transfer FSMO now? Or wait to fix
all issues?

Here are the result of netdiag.

netdiag

..........................................

Computer Name: dc1
DNS Host Name: dc1.chicagobotanic.org
System info : Windows Server (R) 2008 Standard (Build 6001)
Processor : x86 Family 6 Model 23 Stepping 6, GenuineIntel
Hotfixes : none detected


Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS Async Adapter' may not be working because it
has
not received any packets.
GetStats failed for 'isatap.{EA38CE25-62E1-4E3E-962F-074BA84D0E9F}'.
[ERROR_
GEN_FAILURE]



Per interface results:

Adapter : Local Area Connection 5

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : dc1
IP Address . . . . . . . . : 192.1680.17
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 192.1680.2
Primary WINS Server. . . . : 192.1680.17
Secondary WINS Server. . . : 192.1680.29
Dns Servers. . . . . . . . : 192.1680.17
192.1680.29
192.1680.19


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{EA38CE25-62E1-4E3E-962F-074BA84D0E9F}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
[WARNING] The DNS entries for this DC are not registered correctly on
DNS se
rver '0.0.0.0'. Please wait for 30 minutes for DNS server replication.
PASS - All the DNS entries for DC are registered on DNS server
'192.1680.17' a
nd other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'192.1680.29' a
nd other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{EA38CE25-62E1-4E3E-962F-074BA84D0E9F}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{EA38CE25-62E1-4E3E-962F-074BA84D0E9F}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'DOMAIN' is to '\\dc.chicagotech.net'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

[chicagotech]

From the result of netdiag and dcdiag, it seems that there is no fatal
error on the DCs. I suspect that this problem is caused by the 2000 FSMO
according to the error code 9906 described in the event.

Since the AD is healthy, we can try to backup all DCs and then transfer the
FSMO roles to the 2008 DC to see if this issue will be fixed.

If the events are still logged, please try the following solution:

1. Logon to the 2008 DC as the builtin Administrator.

2. Start "Server Manager" from "Start"->"Administrative Tools"->"Server
Manager".

3. In the console tree, expand "Roles"->"DNS Server"->"DNS".

4. Right-click the DC under "DNS", and then click "Create Default
Application Directory Partitions".

5. Follow the instructions to create the DNS application directory
partitions.

6. Verify that Event IDs 4523 and 4524 are being logged and that no events
in the range 4000 to 4019 appear in the Domain Name System (DNS) event log.

For more information about this solution, please refer:
Event ID 4512 - DNS Server Active Directory Integration
http://technet.microsoft.com/en-us/libr ... 35663.aspx

[chicagotech]

After transferred the FSMO, it doesn't have the same event. Thanks.